At Upside, data security is a core operating principle that underpins how we work with retailers, how we serve consumers, and how we scale a two-sided marketplace built on performance and trust. Every offer, and every measurement of incremental value requires confidence that data is handled responsibly, securely, and transparently. 

A strong foundation for data security

Upside aligns with globally recognized security frameworks that evaluate how organizations protect sensitive data, manage risk, and enforce operational controls. Certifications such as ISO/IEC 27001 reinforce Upside’s commitment to ensuring the highest level of security and protection. For retailers and users, this means greater protection, clearer accountability, and confidence that data is handled using industry-leading practices. For Upside, it means continuously validating that our security posture meets the expectations of partners operating in highly regulated, high-volume environments.

The principles behind our approach

Upside’s data security strategy is guided by a clear set of principles that shape how we design systems, evaluate partners, and operate day to day. They’re embedded into how we operate — not layered on after the fact.

Minimization

We collect only the data required to improve the marketplace experience. Limiting data collection reduces exposure and ensures we stay focused on purpose-driven use.

Transparency

We are clear about what data we use, how it’s handled, and why it’s needed. Our policies are designed to be accessible and understandable, not hidden behind legal or technical jargon.

Control and accountability

Retailers and users have visibility into how data is protected and governed. Internally, access is restricted based on role and need, with controls in place to ensure appropriate use.

Continuous improvement

Data security is not static. Upside invests in ongoing monitoring, legal compliance, regular audits, and alignment with evolving industry standards to ensure our practices keep pace with both growth and risk.

Together, these principles ensure data is used responsibly — solely to power the Upside marketplace and deliver measurable value — without compromising trust. For more about the kind of data we protect, see our Data & Security page.

How to learn more

Transparency is a critical part of how Upside builds trust. That’s why we’ve created a centralized, always-on Trust Center where retailers and partners can access up-to-date information about our data privacy and security practices.

Through the Trust Center:

• View and download current security certifications
• Access data handling and privacy policies
• Review security controls and incident response practices
• Understand how Upside protects personal, payment, and performance data
  
  

By making this information easy to access, we help retailers move faster, reduce friction during evaluations, and gain confidence that Upside’s standards align with their own.

To learn more about how Upside approaches data privacy and security, visit our Trust Center.